$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.cer (raw, json) Hash identifier: BoTq82XgNfjrRXa0zVFaZD1gOqiJR+/rjrpjJqK8zGY= Subject key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F8F62757177B1022D7CCBAAEA955D53F822E2A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 17 Jan 2024 13:14:39 +0000 Certificate not after: Wed 15 Jan 2025 13:19:39 +0000 Subordinate resources: IP: 103.75.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8f:62:75:71:77:b1:02:2d:7c:cb:aa:ea:95:5d:53:f8:22:e2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 17 13:14:39 2024 GMT Not After : Jan 15 13:19:39 2025 GMT Subject: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:7d:68:4f:0f:79:6f:c8:81:f7:89:dc:57: d1:5b:c0:d8:51:4c:08:c5:0a:78:b2:83:54:e6:3d: 67:aa:14:9c:90:29:4b:e4:e4:75:01:78:fd:03:fb: 99:d7:86:d4:31:59:aa:d2:fb:f4:31:21:da:9d:82: e3:b6:28:8c:ef:97:96:21:cd:ff:ed:ee:7a:8a:b4: 42:80:68:5d:87:20:70:da:90:b6:c0:1a:21:a1:38: 4e:88:68:f8:66:e8:be:61:b9:c7:d0:43:e8:8a:85: d8:96:da:3b:94:b4:63:82:c9:47:8a:9e:27:54:59: 76:5e:e2:7e:e9:f8:80:a7:d1:c4:da:5c:cb:ba:24: 82:45:ce:72:dc:62:1d:03:fc:8b:25:c5:bd:35:1c: 0d:97:f3:bd:e2:07:f5:ce:fe:ce:3e:2d:1b:d4:bb: d7:5f:31:ab:a2:0a:84:d8:62:6a:ec:d0:e0:be:4f: 50:c8:b8:ac:f6:e4:dd:63:d1:fb:fc:fb:1f:16:e5: 3d:3f:fb:5a:34:8b:45:07:d8:aa:10:35:70:c5:35: 83:a1:88:ae:c9:a0:dc:63:16:99:aa:77:9d:f9:a3: 7a:e7:5c:cc:91:ad:41:cf:43:ab:80:4d:e9:8a:56: 6b:5f:92:7e:2f:b4:39:bf:1d:8e:9f:9c:04:6d:42: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.62.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:17:d1:ee:41:e4:28:0d:59:80:55:57:3d:97:50:de:36:75: ac:0a:2a:d7:09:43:5d:7c:49:92:45:b0:97:b7:ea:6e:1d:c1: 69:22:6f:5f:db:65:bb:32:78:e6:43:4d:1f:db:c4:cf:09:d3: da:09:df:6c:0d:ca:88:79:90:a4:bb:b7:00:f2:74:e9:a9:45: a3:dc:50:bb:34:e2:ac:92:b9:e6:f7:7b:af:9d:9d:76:ac:a4: 7f:91:94:07:d7:22:36:be:78:6e:a9:a4:04:ad:b0:ab:53:1e: ba:a7:6e:f1:0a:70:7e:20:10:93:63:9d:ea:b7:0b:f7:3f:32: f7:3a:8c:70:d8:db:09:34:c9:1b:cd:8b:50:8e:96:5e:69:50: bc:b3:dc:9a:94:94:d4:fe:96:87:0b:a0:58:03:9d:47:9e:75: cd:d5:df:fc:e9:7c:a9:97:d5:56:8e:0f:41:60:d9:48:4a:fc: c8:65:89:32:63:83:6a:40:9c:4b:e4:c3:0f:9f:f7:fe:ce:74: 61:57:8a:05:8d:06:17:b4:08:f2:c1:75:3c:27:d4:86:10:93: 56:0a:8f:a2:46:2c:a0:16:2e:59:d5:3b:dc:f5:80:83:dc:d0: 2d:89:7a:c5:e3:0a:35:bc:8b:a1:be:83:6c:60:0f:f6:8f:e3: ba:c5:72:0c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUb49idXF3sQItfMuq6pVdU/gi4qgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDExNzEzMTQzOVoX DTI1MDExNTEzMTkzOVowMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJD OTdFRDI5MTk3NkI2RTM0MjlGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbQfWhPD3lvyIH3idxX0VvA2FFMCMUKeLKDVOY9Z6oUnJApS+TkdQF4/QP7 mdeG1DFZqtL79DEh2p2C47YojO+XliHN/+3ueoq0QoBoXYcgcNqQtsAaIaE4Toho +GbovmG5x9BD6IqF2JbaO5S0Y4LJR4qeJ1RZdl7ifun4gKfRxNpcy7okgkXOctxi HQP8iyXFvTUcDZfzveIH9c7+zj4tG9S7118xq6IKhNhiauzQ4L5PUMi4rPbk3WPR +/z7HxblPT/7WjSLRQfYqhA1cMU1g6GIrsmg3GMWmap3nfmjeudczJGtQc9Dq4BN 6YpWa1+Sfi+0Ob8djp+cBG1CLDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQzq2RXG+GCfwvJftKRl2tuNCn6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wN2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMz LTM3ZjUtNDY2Ny1hNDMwLTZmYTExMWQzNDNhYS8wLzc0MzNBQjY0NTcxQkUxODI3 RjBCQzk3RUQyOTE5NzZCNkUzNDI5RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSz4wDQYJKoZIhvcNAQELBQADggEBAAoX0e5B5CgNWYBVVz2XUN42dawKKtcJ Q118SZJFsJe36m4dwWkib1/bZbsyeOZDTR/bxM8J09oJ32wNyoh5kKS7twDydOmp RaPcULs04qySueb3e6+dnXaspH+RlAfXIja+eG6ppAStsKtTHrqnbvEKcH4gEJNj neq3C/c/Mvc6jHDY2wk0yRvNi1COll5pULyz3JqUlNT+locLoFgDnUeedc3V3/zp fKmX1VaOD0Fg2UhK/MhliTJjg2pAnEvkww+f9/7OdGFXigWNBhe0CPLBdTwn1IYQ k1YKj6JGLKAWLlnVO9z1gIPc0C2JesXjCjW8i6G+g2xgD/aP47rFcgw= -----END CERTIFICATE-----Generated at Thu May 9 00:37:01 2024 by rpki-client on console-fra.rpki-client.org